nps-2009-canon2
- A set of six FAT32 forensic images created during a typical use of a Canon PowerShot SD800IS digital camera. The images were made by placing an SD card into the camera, taking photos, removing the card, erasing select photos, imaging the card, and then repeating the process. Some of the JPEGs are fragmented, some are not. Some are resident in the file system, some are deleted but recoverable, and several have data present but no longer have any file system metadata and can only be recovered through carving. Of these carvable JPEGs at least two are fragmented. This image was created to test and teach basic file recovery, fragmented file recovery, and file carving.nps-2009-canon2-gen1
Acquisition Date: 2009-01-0612:24:40.
 |
 |
 |
nps-2009-canon2-gen2
Acquisition Date: 2009-01-0612:24:41.
 |
 |
 |
nps-2009-canon2-gen3
Acquisition Date: 2009-01-0612:24:42.
 |
 |
 |
nps-2009-canon2-gen4
Acquisition Date: 2009-01-0612:24:43.
 |
 |
 |
nps-2009-canon2-gen5
Acquisition Date: 2009-01-0612:24:44.
 |
 |
 |
nps-2009-canon2-gen6
Acquisition Date: 2009-01-0612:24:46.
 |
 |
 |